Security policy
How to report a flaw
Responsible reports help protect users without exposing details before a fix is available.
Contact
Send information to security@kpassword.app. Include app version, operating system, reproduction steps, expected impact and minimal evidence.
What to avoid
- Do not publish exploitable details before a fix.
- Do not access third-party data.
- Do not attempt persistence, exfiltration or destructive actions.
GitHub
When appropriate, also use the repository security area: Security advisories.